Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision Both sides next revision
tutorial:adm:server_preparation [2021/02/08 13:56]
soval [Instalation and software configuration]
tutorial:adm:server_preparation [2021/05/04 08:39]
kopro [Disabling mod_security rules] update configuration for certificates
Line 607: Line 607:
         <Location "/idm/api/v1/websocket-info/">         <Location "/idm/api/v1/websocket-info/">
                 SecRuleRemoveById 950100                 SecRuleRemoveById 950100
 +        </Location>
 +
 +        # These break Certificate Authority module
 +        <Location "/idm/api/v1/crt/certificates">
 +                SecRuleRemoveById 960915
 +                SecRuleRemoveById 200003
         </Location>         </Location>
                  
 + # Modsec can throw false positives on some files due to multipart boundary check
 + <Location "/idm/api/v1/attachments/upload">
 + SecRuleRemoveById 960915
 + SecRuleRemoveById 200003
 + </Location>
 +
         # do not log request/response body         # do not log request/response body
         SecAuditLogParts AFHZ         SecAuditLogParts AFHZ
  • by koulaj